Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: 3gf70jLmBTijJrKomCWD9mread+WaDnwOiqaUDgwnS4=
Subject key identifier: 52:0E:6F:BD:3D:C2:4F:BA:33:6D:DE:C9:20:CD:9D:8C:0A:00:D5:BA
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019F8FEC49E62E5E60E6B155FEC20EB9A4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0E7A
Signing time: Thu 23 Jul 2026 17:00:54 +0000
Manifest this update: Thu 23 Jul 2026 17:00:54 +0000
Manifest next update: Fri 24 Jul 2026 17:00:54 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: YZn03km/M/V4Oef3kpvQ/w6OgUJ9dgUqRYCin3Vpyp0=)
4: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WueW6I82GEBJmTpOwdN6my0iBVY.roa (hash: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:49:e6:2e:5e:60:e6:b1:55:fe:c2:0e:b9:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 23 17:00:54 2026 GMT
Not After : Jul 24 17:00:54 2026 GMT
Subject: CN=520e6fbd3dc24fba336ddec920cd9d8c0a00d5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:54:01:fd:d2:d4:2a:ac:a1:26:54:11:3d:
da:e4:30:26:db:63:be:d6:7e:5e:24:70:5d:2f:91:
d6:07:4b:29:27:84:cf:36:57:84:f7:8f:ce:41:86:
32:2d:25:8e:9e:f5:be:77:19:97:87:0c:50:57:cc:
57:12:cd:47:c5:69:51:a1:2a:eb:05:1c:eb:69:44:
d1:0d:d3:b1:24:bd:34:ab:4f:24:e2:15:21:d9:41:
56:18:c9:74:8b:e5:d9:a0:bf:38:84:2d:0a:1f:06:
8e:88:0a:95:4a:f9:a2:81:6f:c9:0d:4e:50:c9:e9:
68:89:27:a9:b7:a4:e4:76:28:7c:11:0d:53:33:5c:
77:7a:85:e9:bf:9e:ee:86:af:cb:c7:bb:f4:9c:f3:
d6:35:0a:7c:b6:19:68:9c:c4:06:85:89:f5:7d:60:
7a:44:fb:5a:cd:54:b9:04:99:48:f8:cb:b0:bb:23:
13:ad:de:4e:1e:af:eb:80:99:01:48:eb:18:e4:15:
44:30:ad:a8:55:e4:7e:ed:6b:29:65:7e:43:bb:be:
ca:f2:7d:42:ce:4e:c2:1d:28:16:27:2c:a8:03:1d:
46:17:cc:15:e0:03:4e:51:d0:23:5b:81:05:f1:42:
00:fe:0c:fd:36:9d:22:6e:cb:eb:34:1a:9f:12:40:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:6F:BD:3D:C2:4F:BA:33:6D:DE:C9:20:CD:9D:8C:0A:00:D5:BA
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:54:b3:3e:65:0e:33:f5:cd:17:a1:dd:27:99:58:7c:3e:33:
ae:61:85:ec:2d:a0:eb:1c:77:b0:58:38:a7:6f:26:43:2e:b9:
be:97:6b:2a:f9:11:22:68:a3:c4:47:8c:1a:0f:7d:20:a7:9e:
0d:16:31:19:11:7d:0a:21:14:c4:2a:21:09:60:ac:c9:3e:13:
ec:76:c5:04:54:c7:92:dd:e6:ba:f1:1b:d0:1e:18:19:0f:62:
23:3d:e0:ce:9f:cf:22:37:7a:60:77:b2:63:fc:07:10:20:9f:
56:af:4e:cd:76:9c:9f:09:c5:03:39:64:18:24:d5:89:73:d9:
8d:a8:81:29:07:f3:25:6d:b7:01:32:8d:f6:e1:88:33:76:c7:
0e:68:dc:7b:31:59:09:d2:09:4a:c2:f6:9a:91:c9:cf:de:9f:
95:4d:e6:9a:9a:fd:ab:94:d7:31:51:02:17:b9:3e:b3:f4:cc:
5b:d5:32:7b:f4:cb:0c:dc:64:7b:0e:2f:c2:2b:87:48:48:9d:
ad:fe:ae:51:72:5a:a3:01:33:e7:0c:1f:d8:7c:cc:0f:2a:07:
86:34:0b:4b:f6:a4:40:f8:bc:74:9c:28:e1:a9:3e:d3:a2:9a:
5a:84:d2:21:4d:d4:82:0d:3e:04:62:dc:12:77:b7:d9:56:bb:
d4:9c:d5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7EnmLl5g5rFV/sIOuaStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy
ODhmMTMwHhcNMjYwNzIzMTcwMDU0WhcNMjYwNzI0MTcwMDU0WjAzMTEwLwYDVQQD
Eyg1MjBlNmZiZDNkYzI0ZmJhMzM2ZGRlYzkyMGNkOWQ4YzBhMDBkNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGtUAf3S1CqsoSZUET3a5DAm22O+
1n5eJHBdL5HWB0spJ4TPNleE94/OQYYyLSWOnvW+dxmXhwxQV8xXEs1HxWlRoSrr
BRzraUTRDdOxJL00q08k4hUh2UFWGMl0i+XZoL84hC0KHwaOiAqVSvmigW/JDU5Q
yeloiSept6Tkdih8EQ1TM1x3eoXpv57uhq/Lx7v0nPPWNQp8thlonMQGhYn1fWB6
RPtazVS5BJlI+MuwuyMTrd5OHq/rgJkBSOsY5BVEMK2oVeR+7WspZX5Du77K8n1C
zk7CHSgWJyyoAx1GF8wV4ANOUdAjW4EF8UIA/gz9Np0ibsvrNBqfEkBp/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIOb709wk+6M23eySDNnYwKANW6MB8GA1UdIwQY
MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt
NzM2Nzg5ZWU2ZmQwLzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw
LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlSzPmUO
M/XNF6HdJ5lYfD4zrmGF7C2g6xx3sFg4p28mQy65vpdrKvkRImijxEeMGg99IKee
DRYxGRF9CiEUxCohCWCsyT4T7HbFBFTHkt3muvEb0B4YGQ9iIz3gzp/PIjd6YHey
Y/wHECCfVq9OzXacnwnFAzlkGCTViXPZjaiBKQfzJW23ATKN9uGIM3bHDmjcezFZ
CdIJSsL2mpHJz96flU3mmpr9q5TXMVECF7k+s/TMW9Uye/TLDNxkew4vwiuHSEid
rf6uUXJaowEz5wwf2HzMDyoHhjQLS/akQPi8dJwo4ak+06KaWoTSIU3Ugg0+BGLc
Ene32Va71JzV9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:15 2026 by rpki-client